Vulnerability Bulletins

Cisco IOS XR Software Model-Driven Programmability Behavior with AAA Authorization

System information

Affected software Cisco


Cisco IOS XR Software supports a programmatic way of configuring and collecting operational data on a network device using data models. Data models provide access to the capabilities of the devices in a network using NETCONF or gRPC. According to Cisco IOS XR Software configuration guides, if NETCONF or gRPC are enabled on a device, authentication, authorization, and accounting (AAA) authorization should be configured to prevent unauthorized access: Configure AAA authorization to restrict

More info:

Standar resources

Property Value

Version history

Version Comments Date
1.0 Advisory issued 2023-09-14
Ministerio de Defensa